All Issues | Identity Decoded

Someone Just Used AI to Break Into 10 Companies

A ransomware crew turned a free coding assistant into an attack tool — and it never knew the difference.

Software Supply Chain

I Won't Let My Kids on TikTok, Instagram Roblox. Here's the $400 Million Reason Why

An extra issue, off the usual format — on TikTok's $400M fine, Meta's $17.1B settlement, the Roblox lawsuits, and why I think age verification should be a condition of doing business, not a roadmap item.

tiktok

Your AI Assistant Is Spying for Strangers

Researchers turned Microsoft Copilot into a full reconnaissance tool using nothing but polite, innocent-sounding questions — and any AI assistant with broad access could do the same.

meta-hacking

Firefox's Master Key Was Sitting on GitHub

The signature that proves a Firefox update is real got exposed — and there's no way to know who saw it

Software Updates

Your AI Login Isn't Yours Anymore

Stolen and resold AI accounts are turning shared logins into a surveillance channel nobody notices

Account Takeover

Your Copilot Caught a Virus

A hidden instruction in one Word file just proved AI assistants will infect every document they touch next.

Microsoft Copilot

Your AI Code Reviewer Just Approved Malware It Never Saw

A hidden comment in a pull request is all it takes to hijack the AI gatekeeper your team trusts to ship safe code

Zero Trust

The Email That Convinced Your AI You're Allergic to Penicillin

One email is all it takes to plant a permanent lie in your AI assistant's memory — and there's no patch coming, because it isn't a bug.

identity-security

The 3-Minute Security Audit Every Developer Should Run Before AI Touches Their Code

Symlink attacks, hallucinated packages, and prompt injection are turning your AI pair programmer into an attacker's easiest way in

NHI